Network Security

Just about to embark on my testing of Cisco Security Manager 4.0 ready for deployment.Was about to deploy CSM 3.31 but saw that CSM4.0 was on the horizon and we are trying to upgrade all servers to Windows Server 2008 so decided to wait.Now that CSM ...

Hello,I'm new to comm/firewall-related things. I have a new customer that has an ASA 5505.This ASA doesn't have any class-map or policy-map statements in its config. From what I've read there is, by default in an ASA 5505, the following configuration...

Hi,I have just started my CCSP prep.I want to know if the Cisco 5505 with an AIP SSC will be enuf to practice the lab for IPS exam.Please let me know.RgdsMuhammad hamzah

I have an AIP-SSM-20 module that I am in the process of upgrading the system images and the signatures.I was wondering if someone could guide me in the right direction on how to configure an anti-spoofing policy on the sensor.If you have some sample ...

Hi guys ,I m facing fwaring errors for device - IDSM-2 module in 6500 switch , IPS version 7.0(2)E4 signature - 498.004Jun2010 01:08:40.101 29.551 interface[599] Cid/W errWarning Inline data bypass has stopped.04Jun2010 01:14:15.350 335.249 interface...

Hi,I am facing issue with VPN in pix runnung 6.3..When i "issue sh crypto is sa" it shows the state is in MM_ACTIVE, what may be the issue... ?is it possible to check debug for one sa in pix running 6.3 image?Regardsamar

Hi,have an ASA 5505 with version 8.3 ..... create a remote vpn tunnel but i can`t connect from the client. Don`t know why. Here is the config:ASA Version 8.3(1)!hostname ASAnames!interface Vlan1nameif insidesecurity-level 100ip address 172.16.23.5 25...

Hi all,I am trying to set a new context and want to allow ainternet ccess to users through  new context...Topology:========Internetrouter<==== FWSM (Admin, context1, context 2)<=====LANinternet router inside and outside ip is public ip...FWSM(outside...

Dear Friends,I am having a peculiar problem here. I have a ASA 5520 with VPN plus license. whenever i give a command like# nat (inside) 0 access-list no-nat#nat (dmz3) 0 access-list no-nat1and thenaccess-list no-nat1 permit esp 172.24.67.16 255.255.2...

Hi All,A client ordered a new ASA5520 ,but urgently needed a firewall inplace so loaned the client one of my older 5520's running 6.22, thinking that once their equipment is delivered I will downgrade the software on the new device install the runnin...

Hey folks,I'm working on a FWSM code v3.2(2) in multiple context mode.I have a context that has several hosts within a VLAN terminated in this context.I can ping into and out from these hosts.  However, I am unable to ping into the firewall and get a...